$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D9E0F5406B8911F0BC7A9F51C4F9AE02.roa File: D9E0F5406B8911F0BC7A9F51C4F9AE02.roa (raw, json) Hash identifier: LEMM5GNyCpPv1tamr9jyLTxD6Wu/Cue6sQOUyu/ifQA= Subject key identifier: 1D:7A:F9:0F:14:D0:FD:47:FE:B4:57:FC:A3:EB:12:85:F1:53:64:94 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2CA4 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D9E0F5406B8911F0BC7A9F51C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:49:01 +0000 ROA not before: Mon 28 Jul 2025 08:07:06 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152542 IP address blocks: 160.25.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11428 (0x2ca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Jul 28 08:07:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c25d-860b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2a:d2:32:30:51:31:d0:8a:6d:36:09:35:35: 82:32:91:f6:11:c8:0c:54:a5:48:dc:f7:60:9a:7b: 6c:66:f9:81:5e:d8:38:e6:af:d5:13:0b:51:73:bf: 38:42:a6:a0:5e:3b:e0:1d:1c:5b:15:99:86:f1:30: 6c:e5:5e:60:0f:a6:ef:70:bc:2b:58:8d:31:6e:21: 3b:58:e8:44:ae:e6:cd:cd:d9:01:9a:c7:d3:df:68: ef:28:14:b8:c7:b9:00:63:c5:d1:f9:67:00:b1:cb: 71:14:06:33:e5:1f:2f:ee:53:34:53:14:12:4f:47: 0a:14:ac:b1:3f:04:35:52:f0:39:c2:3f:d9:a6:f6: 0b:59:8a:32:fa:39:47:27:5c:b5:63:04:1c:7e:94: 52:62:95:f0:81:35:93:66:7f:06:df:c2:82:54:2e: 36:20:7f:1f:86:d2:ce:5f:23:57:cf:5f:69:3c:77: 36:2a:95:d6:db:dc:47:41:ab:c2:33:e5:60:44:82: f8:0d:05:b6:64:df:40:f2:71:0a:94:38:7c:4e:bc: 88:56:cc:04:e9:03:60:65:b5:b9:b1:1d:9d:f3:f2: 19:89:bd:59:6a:79:10:2a:36:bc:d3:69:43:27:c5: 1d:eb:44:b1:6a:ec:75:d4:f0:3c:79:c2:41:99:fe: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:F9:0F:14:D0:FD:47:FE:B4:57:FC:A3:EB:12:85:F1:53:64:94 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D9E0F5406B8911F0BC7A9F51C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.191.0/24 Signature Algorithm: sha256WithRSAEncryption 73:bd:bb:9d:51:ae:46:30:5f:db:74:6f:2b:ec:0d:15:7f:94: 9f:36:b0:67:1f:08:43:ea:e2:b9:d2:7e:bf:aa:15:75:d2:fd: ab:09:7c:d7:43:75:73:5a:eb:44:0c:0c:2b:54:c5:8b:ca:6a: 7b:1e:f2:aa:0e:76:46:96:eb:c5:4b:15:04:86:2c:3b:65:8f: 89:37:49:15:25:9f:43:b7:b9:45:e2:39:cc:bd:bf:da:c8:c4: 12:8e:a8:1e:77:6a:2e:2b:86:d4:b2:aa:ca:b3:7b:16:fe:62: 7c:54:98:62:df:c1:e1:c3:35:e4:6c:de:73:e3:f8:ca:bb:78: 6c:e6:f7:55:db:19:be:24:8c:2c:08:70:a1:93:34:c9:e2:5c: 0f:b6:98:f7:a1:95:19:d5:a4:9c:c7:1a:23:08:b5:3e:cf:b1: 31:99:7e:a5:99:22:e5:a4:41:c7:d5:02:ae:b7:87:41:ba:d6: 21:18:c9:ec:72:a3:d4:26:4e:9a:7d:3c:45:6b:7b:6d:b7:28: c3:2e:f1:9a:93:47:cc:86:94:18:49:85:14:bb:21:ac:6c:6b: 4b:9a:86:21:12:6c:e4:5a:1c:8a:9c:00:5f:bd:88:2a:21:84: 6d:65:0e:70:36:9b:1e:89:a6:5d:24:fc:2b:e0:c5:10:aa:5d: b8:0f:bd:6e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNzI4MDgwNzA2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzI1ZC04NjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxirSMjBRMdCKbTYJNTWCMpH2EcgMVKVI3PdgmntsZvmBXtg45q/VEwtRc784 QqagXjvgHRxbFZmG8TBs5V5gD6bvcLwrWI0xbiE7WOhErubNzdkBmsfT32jvKBS4 x7kAY8XR+WcAsctxFAYz5R8v7lM0UxQST0cKFKyxPwQ1UvA5wj/ZpvYLWYoy+jlH J1y1YwQcfpRSYpXwgTWTZn8G38KCVC42IH8fhtLOXyNXz19pPHc2KpXW29xHQavC M+VgRIL4DQW2ZN9A8nEKlDh8TryIVswE6QNgZbW5sR2d8/IZib1ZankQKja802lD J8Ud60Sxaux11PA8ecJBmf6r3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB16+Q8U 0P1H/rRX/KPrEoXxU2SUMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRDlFMEY1NDA2 Qjg5MTFGMEJDN0E5RjUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoBm/MA0GCSqGSIb3DQEBCwUAA4IBAQBzvbudUa5GMF/bdG8r7A0V f5SfNrBnHwhD6uK50n6/qhV10v2rCXzXQ3VzWutEDAwrVMWLymp7HvKqDnZGluvF SxUEhiw7ZY+JN0kVJZ9Dt7lF4jnMvb/ayMQSjqged2ouK4bUsqrKs3sW/mJ8VJhi 38HhwzXkbN5z4/jKu3hs5vdV2xm+JIwsCHChkzTJ4lwPtpj3oZUZ1aScxxojCLU+ z7ExmX6lmSLlpEHH1QKut4dButYhGMnscqPUJk6afTxFa3tttyjDLvGak0fMhpQY SYUUuyGsbGtLmoYhEmzkWhyKnABfvYgqIYRtZQ5wNpseiaZdJPwr4MUQql24D71u -----END CERTIFICATE-----Generated at Mon Mar 2 23:58:31 2026 by rpki-client